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RESPONSE TO OFFICE ACTION UNDER 37 C.F.R. 



The following remarks are offered in response to the 
previous Office Action. 
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I . General Remarks Concerning This Response 

Claims 1-35 are currently pending in the present 
application. No claims have been amended, added, or canceled in 
this response. Reconsideration of the claims is respectfully 
requested. 

II . Summary of Present Invention 

A method, a system, an apparatus, and a computer program 
product are presented for an authentication process. A host 
application or system within a distributed data processing 
system supports one or more controlled resources , such as a 
legacy application, that requires the receipt of authentication 
data prior to allowing a user to have access to the controlled 
resource. The required authentication data is encrypted using 
the public key of the host system, and an attribute certificate 
containing the encrypted authentication data is generated by an 
attribute-cert if icate- is suing authority. When a user of a 
client application or system requires access to the controlled 
resource, the attribute certificate is sent to the host, which 
decrypts the authentication data with its private key prior to 
forwarding the authentication data to the controlled resource. 
The controlled resource then authenticates a user based on the 
provided authentication data. 
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Ill - 35 U.S.C. § 103 (a)— Obviousness— FarJrer in view of Riggins 

The Office action has rejected claims 1, 4, 12, 14, 17, 25, 
and 28 under 35 U.S.C. § 103(a) as unpatentable over Parker, 
"Access Control in a Distributed Computer System", U.S. Patent 
Number 5,339,403, filed 05/01/1991, issued 08/16/1994, in view 
of Riggins, "System and method for using an authentication 
applet to identify and authenticate a user in a computer 
network", U.S. Patent Number 6,766,454 Bl, filed 07/23/1997, 
issued 07/20/2004. This rejection is traversed. 
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